Your inspector analogy has a gap the French supermarkets just exposed: inspectors check the building on the plans. At roughly 700 French supermarkets this month, per the finance minister, the affected device was a freezer controller. CSO Online pointed to refrigeration bought as a service, with security rarely involved, so it sat outside the estate anyone inspects. Beyond point-in-time, is scope the bigger limit?
Ross, the firefighter/building-inspector framing is spot on, and your point about prevention being harder to measure explains a lot of buying behavior. One addition from the detection side: inspectors and firefighters learn from the same evidence. The incidents a SOC investigates are the best map of which "wiring" to fix first, so prevention gets stronger when detection findings feed straight back into hardening instead of sitting in a separate budget. Does AI finally make that loop practical? (I'm at Stellar Cyber.)
Fantastic analogy and break down - it really does come down to doing the basics, and doing them well
Your inspector analogy has a gap the French supermarkets just exposed: inspectors check the building on the plans. At roughly 700 French supermarkets this month, per the finance minister, the affected device was a freezer controller. CSO Online pointed to refrigeration bought as a service, with security rarely involved, so it sat outside the estate anyone inspects. Beyond point-in-time, is scope the bigger limit?
Ross, the firefighter/building-inspector framing is spot on, and your point about prevention being harder to measure explains a lot of buying behavior. One addition from the detection side: inspectors and firefighters learn from the same evidence. The incidents a SOC investigates are the best map of which "wiring" to fix first, so prevention gets stronger when detection findings feed straight back into hardening instead of sitting in a separate budget. Does AI finally make that loop practical? (I'm at Stellar Cyber.)